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1 .This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



* NOTICES * 

Japan Patent Office is not responsible for any 
damages caused by the use of this translation. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

(Related application) 

This application asserts the priority based on the U.S. temporary application number 60 of application / 

995 on June 19, 1998. [ 089 and 995 ] 

[0002] 

(Technical field of invention) 

This invention relates to filtering of the information transmitted between a proxy server, the client 
process using a plug-in filter, and a web server in more detail about filtering of the information 
transmitted between a client process and a server process 
[0003] 

(Background technique of invention) 

By the rapid spread of the Internet, accessible amount of information increased from the company or the 
consumer remarkably. Managing an informational inflow is increasing significance gradually. It is 
because the information which a user does not expect not to desire to be opened to the others on the 
Internet, or to be sent by the others is included in information. By connecting a computer or a network to 
the Internet, a user can retrieve, access and download all types of information from the safe information 
of the information of a government agency to the information about amusement. Since most regulations 
on the Internet were not performed, access to all types of information increased dramatically. However, 
a user may need to filter to the information taken out from a network. For example, it is necessary to 
make it, as for a company or a government agency, neither security information nor extra sensitive 
information flow out of the domain of oneselves, such as a local network. Moreover, the information 
received from the Internet cannot be operated in the format by the side of reception. For example, the 
property of the display resolution of the document received from the Internet may differ from the' 
property which the user by the side of the reception of a document supports 
[0004] FF 

In order to cope with an above-mentioned problem, the system which prevents a certain information's 
flowing into a domain, or flowing out of a domain has been developed. As for informational filtering, 
what can be performed is complicated, and such a system is not easy to fit a specific company. 
Generally, the system which filters information cannot change after that the point what kind of 
information to remove how, once it is created by the software-development person, and for that purpose, 
the software-development person completely needed to re-create the filtering system newly. The needs ' 
which information the problem in this approach filters how are in the point of in almost all cases being 
specification and changing to each company and user. It is not realistic to reconstruct a system by the 
software-development person, whenever a user is going to filter different contents. Furthermore, the 
system which corrects at present the data which were not able to be operated in a user environment in 
the phase received first so that it may be operational does not exist 
[0005] 
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J? 6 ^ ^ n ^ r u ta ^ mg , an interface with a computer is simplified by using the Internet, especially 
World Wide Web ( web"). The architecture of a web shall follow the conventional client-server model 
Among the roles of a computer, in general, a role of a claimant (client) of data, or since a role of a feeder 
(server) of data is expressed in general, the vocabulary a "client" and a "server" is used In a web 
environment, a web browser is in a client side and the "web document" to which the specific format was 
performed is in the Internet web server side. A web client and a web server usually communicate 
[0006] USmg protoco1 caIIed "hypertext transferred protocol" (HTTP). 

At the time of activation, a browser opens connection with a server and performs the demand to a 
document. A server usually hands over the demanded document in the format encoded in the standard 
hypertext markup language" (HTML) format. Connection is closed after handing over a document A 
browser displays a document and performs the function specified by the displayed document 
[W07] ' improvement in an informational filtering technique is desired. 

(Outline of invention) 

The approach concerning this invention, a system, and a manufacture are conquered by having the proxv 
server which possesses a plug-in filter for the fault which the existing information system for filtering 
information between a client process and a server process holds. According to the proxy server 
possessing a plug-in filter, it can change easily which information is filtered how. In addition it 
becomes possible by using a plug-in filter not only correction like the informational exenteration but to 
correct an informational property so that it may correspond to the environment of a client process or a 
server process. 
[0008] 

In the approach of filtering the information from the 1st process to the 2nd process as according to the 
1st description of this invention it embodies here and the outline is explained this approach By 
correcting said information based on the process which receives said information from said 1st process 
the process which chooses the filter for applying to the information received according to said 1st 
process, and the instruction included in said filter Let it be a summary to have the process which applies 
said filter to said information, and the process which transmits said corrected information to said 2nd 
process. Said 1st process may be a client process, said information may be a demand and said 2nd 
process may be a server process. Said information included in said demand may be security data Or said 
1st process may be a server process, said 2nd process may be a client process, said information may be a 
response, and said corrected information may be the corrected response. Furthermore, said filtered 
response may be stored in cache memory. The aforementioned process which chooses the filter applied 
to said information is Uniform. Resource When said defined URL agrees with the process which defines 
Locator (URL) and a corresponding filter, and the process which takes out URL from said information 
in said taken-out URL, you may have the process which chooses said filter corresponding to said 
defined URL for applying to said information. 
[0009] 

In the approach of filtering information using a proxy server as according to other descriptions of this 
invention it embodies here and the outline is explained furthermore, this approach The process which 
receives ademand from a client process, and the process which applies a forward direction filter to said 
demand, The process which transmits said filtered demand to a server process, Let it be a summary to 
have the process which receives the response about said filtered demand from said server process the 
process which applies a hard flow filter to said response, and the process which transmits said filtered 
response to said client. Said 2nd process may be a web server and the aforementioned process which 
applies said forward direction filter in this case may also include the process which defines URL and a 
corresponding filter, and the process which filters said demand using said corresponding filter when said 
defined URL is contamed in said demand. Moreover, the aforementioned process which applies said 
hard flow filter when said 2nd process is a web server may also include the process which defines URL 
and a corresponding filter, and the process which filters said demand using said corresponding filter 
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when said defined URL is contained in said response. Said filtered response may be stored in cache 

memory. 

[0010] 

In the approach of adding a filter to a proxy server as according to other descriptions of this invention it 
embodies here and the outline is explained furthermore, this approach The process which creates said 
proxy server which operates so that a filter may be received, Having the process which creates the filter 
possessing a filter regulation and a filter servlet, and the process which adds said filter to said proxy 
server, said proxy server makes it a summary to operate so that information may be corrected using said 
added filter. 

Two or more filters may be added to said proxy server. 
[0011] 

(Detailed description) 

The accompanying drawing which is used for this specification and constitutes some of these 
specifications illustrates operation of this invention, and explains the advantage and principle of this 
invention with detailed explanation of this invention. 
[0012] 

Hereafter, the gestalt of 1 operation of this invention shown in an accompanying drawing is explained to 
a detail. In addition, in a drawing and the following explanation, it referred to using the same sign about 
the same or similar part. 
[0013] 

(Installation) The system and approach concerning this invention perform forward direction filtering and 
hard flow filtering using a plug-in filter to the information transmitted between a client process and a 
server process. A proxy server supervises the demand and response which are transmitted among both 
while taking the interface of a server process and a client process. The system and approach which are 
explained in this operation gestalt can enable him for a user to create a filter and to define this as a proxy 
server, and, therefore, a user can fit to his needs which information is filtered how. These plug-in filters 
correct the information between a client process and a server process by a certain fixed approach. The 
correction on the basis of the contents of removing security information is sufficient as this correction, 
or modification which makes information operational for the information sent from a server process also 
in a client process, and gives compatibility, such as modification of for example, a display resolution 
property, is sufficient as it. 
[0014] 

Furthermore, a proxy server interfaces with a client process and a server process at a detail. A filter is 
created and plug-in is carried out to a proxy server. A filter has a filter regulation and a filter servlet. A 
filter regulation specifies the information which should be removed. For example, Uniform of a demand 
Resource All the information required of URL by which Locator (URL) could be defined as a filter 
regulation, therefore the client process was defined will have the filter applied. When a filter servlet is 
performed, it is an actual instruction which corrects the information included in a demand or a response. 
Therefore, once the indicator which expresses the purport which requires filtering when the above- 
mentioned example is described is given to a demand, by comparing with defined URL, the filter servlet 
corresponding to a filter regulation will be performed, and the information included in a demand will be 
corrected by the fixed approach. 
[0015] 

The approach and system concerning this invention support addition of two or more plug-in filters 
again. By adding a filter, in case a user corrects which information how, he can change a large number. 
Furthermore, the approach and system to apply can also be constituted so that the management task in 
connection with the demand between a client process and a server process and transmission of a 
response may be performed. Moreover, storing in cache memory can also be performed and, thereby, a 
large number to the same information can be accessed promptly. In case storing in cache memory is 
performed, in order to abolish the need of applying a filter to the response received from the server - 
process again, it is desirable to store the filtered response in cache memory. 
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[0016] 

Drawing 1 shows further the example of the client/server system which interconnected through the 
network 100 in the detail. In this example, the remote server system 122 interconnects to the client 
system 120 through a network 100. The client system 120 contains the usual component. For example, 
the bus 126 which connects a processor 124, memory 125 (for example, RAM), and a processor 124 and 
memory 125, the large capacity storage 127 (for example, a magnetic hard disk or an optical storage 
disk) connected to a processor 124 and memory 125 through I/O-hardware-control equipment 128, and a 
network interface 129 like the usual modem are included. 
[0017] 

The server system 122 also contains the usual component. For example, the bus 136 which connects a 
processor 1 34, memory 1 3 5 (for example, RAM), and a processor 1 34 and memory 1 35, the large 
capacity storage 1 37 (for example, a magnetic disk or an optical disk) connected to a processor 134 and 
memory 135 through I/O-hardware-control equipment 138, and a network interface 139 like the usual 
modem are included. It will be recognized from the following publication that this invention may be 
mounted in each of the large capacity storage 127 and 137 on a client/server system or each computer- 
readable medium [ like ] of memory 125 and 135 in the software stored as an instruction which can be 
executed. 
[0018] 

Although the network shown in drawing 1 shows the network as an example, it will be understood by 
this contractor that you may be what kind of topology containing the Internet, the private network, and 
internal computer structure which enable the module in various computer systems or a single computer 
structure to exchange information. 
[0019] 

Drawing 2 shows the suitable data processing system for operation of the approach and system 
concerning this invention. Data processing system 200 has intranet 202 and the Internet 204. Intranet 
202 expresses the network of an organization and contains a computer 206, a computer 208, and a fire 
wall 214. A fire wall 214 supervises both the turning-inward traffic to intranet 202, and the extroversion 
traffic to the Internet 204. The computer 206 and the computer 208 both have many components, and 
memory 215 and 217, secondary storages 219 and 221, at least one I/O devices 223 and 225, and 
processors 227 and 229 correspond to this component. The Internet 204 contains computers 206 and 208 
and the computers 210 and 212 which have the same component. Although described with intranet 202 
and the Internet 204 having only two computers, this contractor will also understand that these networks 
may contain further many computers. In addition, this contractor will understand that the approach and 
system concerning this invention can be used by other Local Area Networks or Wide Area Networks 
Moreover, computers 206, 208, 210, and 212 may also contain the further component or further different 
component. 
[0020] 

The fire wall 214 contains memory 224, the processor 226, and the secondary storage 240. According to 
the approach and system concerning this invention, memory 224 has the proxy server 228 and the proxy 
server 230. Proxy servers 228 and 230 have filters 232 and 234, respectively. A proxy server 228 
performs "forward direction filtering" using a filter 232. "Forward direction filtering" expresses filtering 
performed to the response of these demands only to the demand by which it is sent to the Internet 204 
while a proxy server occurs from the intranet 202 interior. For example, the client program 216 of a 
computer 206 tends to access the server program 220 of a computer 210. In this case, a filter 232 
expresses not only all the parts of ** which should be blocked, and a response but the extroversion 
demand which can pass a fire wall and can flow and a turning-inward response. That is, filtering 
performed by the approach and system concerning this invention includes blocking blocking that a part 
of website is accessed or that the whole website is accessed 
[0021] 
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